Copy rule just copies it to the same group. Currently there is no way to copy selected rules into a new group.. you can do this a few different ways.

1. Change the group name to in-dos. This will now use the file in-dos.rules for all dos rules.
2. Create a new group called in-dos.rules and change each rule manually.

3. Wait for a week and a new build will be out to move selected rules to a different group.
4. Perform the following steps

• Create a new group called in-dos.
• Click on snort policies and open the policy with the rules of interest into wordpad (it's a menu item).
• Copy the rules to the clipboard you would like to copy.
• Click the Import Text to Policy menu item.
• Paste the contents of the clipboard and select the group of interest.
• Click start.

One thing to know, this will not change and SID's so if you are copying them, make sure you change the SID's or remove the original rules.

Cheers,

Jeff